Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QxAPmQBe5uQUs7dU1FWq8ZsYFVo.roa
File: QxAPmQBe5uQUs7dU1FWq8ZsYFVo.roa (raw, json)
Hash identifier: xcragJeC0smOlibvQ/n30oGRCQPfsmqs2KxfiR0VN2g=
Subject key identifier: 43:10:0F:99:00:5E:E6:E4:14:B3:B7:54:D4:55:AA:F1:9B:18:15:5A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8026CAFEC6DE232CF22DAAE0A6396D4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QxAPmQBe5uQUs7dU1FWq8ZsYFVo.roa
Signing time: Tue 02 Jan 2024 02:30:51 +0000
ROA not before: Tue 02 Jan 2024 02:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.227.146.0/23 maxlen: 24
185.209.38.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.126.82.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 16:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:6c:af:ec:6d:e2:32:cf:22:da:ae:0a:63:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43100f99005ee6e414b3b754d455aaf19b18155a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:f6:20:cf:58:d6:a2:b6:f1:dd:4e:b4:87:
d2:e4:22:32:da:16:b3:98:f9:fa:42:9d:1c:9d:6f:
d9:70:78:31:8a:dc:21:6a:c2:42:a0:7d:92:d7:2e:
c7:95:05:87:23:6e:42:57:e5:ae:9c:8f:6c:50:af:
d7:74:5f:6f:1e:34:37:91:59:0b:c1:46:4a:75:9d:
d7:49:c7:83:13:75:ec:5b:f7:5b:f5:28:03:99:f4:
a2:3a:9c:bb:66:cc:6a:42:c7:ea:fc:3b:4f:93:9d:
87:7d:fe:1f:94:fd:1d:ec:ab:2b:90:ec:a2:a1:c3:
c2:3e:d1:71:96:d7:69:72:9d:ab:dc:02:e4:f2:af:
4e:44:de:05:b9:3d:2e:7d:3c:d5:0e:f6:40:34:64:
4a:54:5a:2d:17:1e:37:b6:a4:6e:48:3a:94:67:3b:
a0:f1:55:30:11:52:2b:f4:65:fb:0f:be:f6:a9:b5:
c5:7d:66:61:5d:4c:00:db:22:6a:86:96:98:1f:a9:
67:47:6a:f5:b2:39:ef:b1:81:26:33:0d:ca:73:77:
41:82:54:96:c1:08:fb:ff:ab:85:dd:00:e5:e9:d3:
5e:74:08:fb:26:26:5c:12:de:eb:6e:f9:5d:99:64:
17:73:46:7d:79:fd:ea:24:67:b7:a4:1b:a1:87:1f:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:0F:99:00:5E:E6:E4:14:B3:B7:54:D4:55:AA:F1:9B:18:15:5A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QxAPmQBe5uQUs7dU1FWq8ZsYFVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.209.38.0/24
185.220.249.0-185.220.251.255
185.223.82.0/24
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
22:22:df:e1:f4:22:46:fe:11:bb:45:70:58:9e:d7:8d:15:32:
01:f7:a1:d1:6e:2f:d1:9c:39:ab:f6:85:db:df:fc:37:76:92:
c7:b1:1f:06:bb:a4:14:34:26:01:ab:f0:7f:b6:a2:d1:c1:b4:
b9:d2:6b:95:e1:06:00:c8:c1:9d:38:e3:f9:c9:bc:60:72:5c:
30:30:11:8a:70:8f:dd:43:57:a3:58:a7:a8:ed:91:f9:a0:1d:
49:a6:28:17:4a:fb:c6:ca:ae:3c:d0:d4:76:8b:81:90:ee:c6:
c7:ad:60:db:5d:ac:bb:4c:8d:e2:ef:88:70:5d:6f:fb:46:ec:
a3:5d:f7:9f:6b:14:34:c9:22:85:a5:49:0e:a2:7b:b1:b6:ab:
9e:b3:d1:f3:de:1e:fa:5a:bd:11:22:0e:bd:e5:bb:59:7b:d3:
2b:b4:14:73:37:ad:5c:3f:a9:94:d5:e4:15:44:e2:c1:40:25:
0d:30:77:79:83:65:ab:94:aa:a8:c1:a5:8c:11:9b:eb:1a:54:
e5:61:02:1c:f1:d5:43:d4:7c:c7:b9:2d:e6:8f:58:a2:d9:60:
99:6b:25:12:fc:ff:5c:39:e6:5c:b3:f9:34:8c:d9:7d:94:35:
40:66:f5:95:a7:a0:5e:44:44:5b:4a:a2:04:de:13:4d:e2:c9:
bb:89:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org